Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: j6sMJbsTPN+O8cstc/ALErfMSGlkUxyjsPYCIVXXz5E=
Subject key identifier: 1A:08:F3:F1:A6:C4:30:84:3A:E5:E1:A9:84:C5:8B:DF:44:0D:63:2C
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019F943735D8BCF95E7B9B6D7E06B6B024AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 02F3
Signing time: Fri 24 Jul 2026 13:01:13 +0000
Manifest this update: Fri 24 Jul 2026 13:01:13 +0000
Manifest next update: Sat 25 Jul 2026 13:01:13 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: 7szdK4oomXzVE1hTdna95jSPg+mbkoH8FXt1VuL/RPM=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:35:d8:bc:f9:5e:7b:9b:6d:7e:06:b6:b0:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Jul 24 13:01:13 2026 GMT
Not After : Jul 25 13:01:13 2026 GMT
Subject: CN=1a08f3f1a6c430843ae5e1a984c58bdf440d632c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:d0:15:e2:af:55:17:2e:a0:ad:f3:5d:ab:
7a:95:f2:85:3f:a2:00:52:92:b7:d7:10:9c:56:d9:
c1:07:39:1a:b5:47:a2:e2:c0:3c:8a:97:1b:2f:af:
b2:19:af:a6:33:ca:2b:24:57:dd:2d:39:7f:16:4a:
ca:dc:0e:f2:37:e1:39:06:e9:35:56:02:eb:92:f2:
71:0a:95:13:96:ef:ae:1e:ec:0d:c5:5e:b6:81:ae:
6c:4a:22:a4:a2:80:ac:c5:53:ab:df:14:9c:46:ae:
77:3b:9c:cb:fc:9c:92:57:81:59:94:04:98:93:e6:
3d:c5:42:c2:f1:6d:f5:44:1a:7a:46:1a:e1:39:01:
1d:da:11:b9:06:3a:09:d9:f2:fb:6b:25:19:eb:ff:
80:05:8e:7f:38:e0:f5:23:98:e1:d1:1c:d1:62:6c:
ff:64:c7:98:22:80:2b:72:df:88:2c:70:d3:d3:76:
c1:4a:ad:a5:b5:54:2d:dc:17:9d:58:9e:8e:6c:e9:
54:6a:c2:79:f1:cd:01:cc:34:86:52:8c:f3:bd:cb:
2b:4d:5d:99:52:71:4e:1f:6b:bf:3e:7f:cf:de:16:
0a:dc:57:28:b3:15:61:e6:77:3c:cc:54:f8:28:e6:
bb:cc:f5:8a:0a:5b:e8:2d:57:92:df:79:be:11:9a:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:F3:F1:A6:C4:30:84:3A:E5:E1:A9:84:C5:8B:DF:44:0D:63:2C
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:51:3e:90:3a:f6:96:97:11:e8:d0:fc:bb:8d:98:9a:f3:50:
e1:d8:21:2f:7b:1b:20:b5:a8:4f:8c:f6:4e:01:89:6e:ed:e5:
87:71:c9:b7:f9:4d:75:07:b8:73:66:0a:40:98:f5:ec:e2:fc:
12:4e:d8:a3:94:56:e0:7d:3e:5b:5e:81:90:7e:f5:41:0a:f3:
8d:c6:43:25:be:79:d3:65:1b:5f:1b:2b:df:12:00:7c:23:37:
24:e4:54:44:f4:ae:b6:cb:4d:8d:6e:59:73:a6:9d:82:e4:f4:
5b:ab:ff:d4:8b:e6:22:cb:19:27:45:28:2d:78:88:27:d2:ae:
e3:01:23:22:a0:be:92:ab:13:f1:c5:d2:2c:9a:8a:d0:fd:97:
82:25:88:f3:7a:16:73:0b:e9:05:41:7a:07:b6:3e:6d:a0:51:
3c:c5:e7:fc:8f:cc:99:7f:9b:9f:c0:9e:cb:29:6c:d2:d4:d6:
9c:bf:62:e2:51:f1:63:f9:92:47:db:df:77:89:8a:b5:be:3c:
ae:8e:1b:59:c0:00:88:35:4f:94:17:66:47:59:df:c9:6b:98:
e4:17:51:66:0c:14:3f:c0:b4:36:6a:12:fc:c4:7e:77:e7:e2:
0d:e3:e8:54:79:06:ec:17:91:e8:c0:2d:62:9a:76:08:2f:6f:
68:76:b9:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNzXYvPlee5ttfga2sCStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOGY0MGIxMjQ4ZGUzZGE1ZjVkNjA5N2Y4MTA2ODI5M2M0
YmVlZjcwHhcNMjYwNzI0MTMwMTEzWhcNMjYwNzI1MTMwMTEzWjAzMTEwLwYDVQQD
EygxYTA4ZjNmMWE2YzQzMDg0M2FlNWUxYTk4NGM1OGJkZjQ0MGQ2MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth/QFeKvVRcuoK3zXat6lfKFP6IA
UpK31xCcVtnBBzkatUei4sA8ipcbL6+yGa+mM8orJFfdLTl/FkrK3A7yN+E5Buk1
VgLrkvJxCpUTlu+uHuwNxV62ga5sSiKkooCsxVOr3xScRq53O5zL/JySV4FZlASY
k+Y9xULC8W31RBp6RhrhOQEd2hG5BjoJ2fL7ayUZ6/+ABY5/OOD1I5jh0RzRYmz/
ZMeYIoArct+ILHDT03bBSq2ltVQt3BedWJ6ObOlUasJ58c0BzDSGUozzvcsrTV2Z
UnFOH2u/Pn/P3hYK3FcosxVh5nc8zFT4KOa7zPWKClvoLVeS33m+EZqxlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoI8/GmxDCEOuXhqYTFi99EDWMsMB8GA1UdIwQY
MBaAFF2PQLEkjePaX11gl/gQaCk8S+73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEt
YmQ2NWZlZDY3ZGM2LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEtYmQ2NWZlZDY3ZGM2
LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVE+kDr2
lpcR6ND8u42YmvNQ4dghL3sbILWoT4z2TgGJbu3lh3HJt/lNdQe4c2YKQJj17OL8
Ek7Yo5RW4H0+W16BkH71QQrzjcZDJb5502UbXxsr3xIAfCM3JORURPSutstNjW5Z
c6adguT0W6v/1IvmIssZJ0UoLXiIJ9Ku4wEjIqC+kqsT8cXSLJqK0P2XgiWI83oW
cwvpBUF6B7Y+baBRPMXn/I/MmX+bn8Ceyyls0tTWnL9i4lHxY/mSR9vfd4mKtb48
ro4bWcAAiDVPlBdmR1nfyWuY5BdRZgwUP8C0NmoS/MR+d+fiDePoVHkG7BeR6MAt
Ypp2CC9vaHa5rA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:34 2026 by rpki-client